1. Scope
This Policy applies to the public website, account registration and sign-in, the authenticated ZyBill application, cloud business records stored for a Business Account, and iblu assistant surfaces where they are enabled.
Defined terms: Company means RD AINAN GLOBAL TECHNOLOGIES PRIVATE LIMITED. Service means ZyBill. User means a person who creates or uses a ZyBill login. Business Account means the workspace and records tied to a business membership.
2. Information We Collect
We collect information you provide, information generated when you use the Service, and information you explicitly import.
Account. Name, email address, password credential data, and authentication or session information. Passwords are stored as secure one-way hashes (currently Argon2). We do not store account passwords in plain text.
Business Profile. Legal and trade name, GST registration status, GSTIN and PAN if you enter them, address, state, contact information, and bank or UPI details you voluntarily configure for invoices or payment instructions.
Customer and vendor data. Names, addresses, GSTIN, phone, email, and other transaction-related details you enter about parties you bill or pay.
Financial and operational records. Invoices, quotations, proforma invoices, delivery challans, payments, expenses, purchases, vendor bills and vendor payments, credit notes, debit notes, inventory and stock movements, and report outputs generated from those records.
Technical data. Where collected in the ordinary operation of the Service: IP address, device or browser information, server logs, authentication and session logs, and security events.
Import. Local ZyBill data you explicitly choose to import into a cloud Business Account.
iblu. If you use iblu, the Service may process your questions and a summarized view of your current Business Account (for example sales, outstanding, GST summaries, inventory, and recent activity). iblu is not currently connected to an external AI provider. Replies may be generated from structured Business Account summaries and local logic. If a live third-party model is connected later, this Policy will be updated to name the category of processor.